Refresh token JS

  1. this should never be done via ajax. As you are leaking a client secret in client side applications…

  2. Your ajax call is wrong… you didn’t specify a post body.